macos: load launchctl agent from root with security context